CN101714203A

CN101714203A - File transparent encryption method for marker file and data file

Info

Publication number: CN101714203A
Application number: CN200910188877A
Authority: CN
Inventors: 胡跃; 温耿青; 卓勇
Original assignee: SHENZHEN HONGAN INFORMATION TECHNOLOGY Co Ltd
Current assignee: SHENZHEN HONGAN INFORMATION TECHNOLOGY Co Ltd
Priority date: 2009-12-16
Filing date: 2009-12-16
Publication date: 2010-05-26

Abstract

The invention discloses a file transparent encryption method for a marker file and a data file. The technical scheme comprises the following steps of: (1) setting that all files in one storage position are encrypted; (2) one encrypted marker file exists in a directory in which each encrypted file is, showing that the file is encrypted; (3) when a kernel module intercepts the 'read' action, deciphering the data of a disk; and (4) when the kernel module intercepts the 'write' action, encrypting the data of the disk.

Description

The file transparent encryption method that adopts tab file and data file to combine

Technical field

The file transparent encryption method that adopts tab file and data file to combine is applied to the file data field of encryption, can be used for being encrypted in the file on local hard drive and the mobile memory medium.

Technical background

File encryption becomes an indispensable ingredient of information security just day by day.The WINDOWS system the NTFS system built-in EFS file encryption function.But there is a defective in this encryption function, must use NTFS.If the storage medium in user's the system uses the file system of non-NTFS, then can't support.

The file encryption solution that some application layers realize then exists the problem that each application program is all needed to be special HOOK.And the read-write of some mode can't be supported.

Have now some other transparent encryption solution, but aspect of performance not very satisfactory.

Summary of the invention

Consider existing technical defective, the invention provides one and support various file system, high performance file transparent encryption method.

Concrete step is as follows:

1) with encryption key and need information encrypted to be saved in configuration file;

2) in system start-up, filter Driver on FSD reads key and needs to encrypt from configuration file memory location;

3) after the normal operation of system, the normal instrument that uses oneself of user;

4) intercept application program new files when action in this memory location at kernel module, in the file of setting up one 0 byte, set up a tab file;

5) when kernel module is intercepted application program and is opened file in this memory location, if not then a newly-built tab file, and with original file encryption;

6) when kernel module is intercepted application program and is read file, with the data decryption of reading in the disk;

7) when kernel module is intercepted the application program written document, the data encryption of disk will be write.

Description of drawings

Fig. 1 encryption system initialization flowchart

The normal operational flow diagram of Fig. 2 encryption system

Embodiment

The present invention is applicable to any OS (Operating System) and any file system.But current is being that example is described implementation step with WINDOWSXP only.

In the time of concrete enforcement, need a WINDOWS XP system, the configurator of key and encrypted location, a filter Driver on FSD.Step is as follows:

At first with drive installation on system;

Then key and encrypted location are configured in the registration table;

Restart system;

Filter Driver on FSD loads the configuration information of key and encrypted location;

System normally starts;

Normal oneself application software commonly used of using of user;

The filter Driver on FSD module is tackled user's operation automatically, and does corresponding processing.

Claims

1. the file transparent encryption method that adopts tab file and data file to combine, its feature is as follows:

Two files, one is the ciphered data file, another is the encrypted indicia file;

When opening for the first time, set up tab file, and with file encryption;

During new files, set up tab file;

When opening later on, just can determine according to tab file whether this file is encrypted;

To write the data encryption of disk, will read the data decryption of disk.

2. the feature of two files is as follows:

One is ciphered data file, and one is the encrypted indicia file;

The user can see data file, and encrypt file is hidden.

3. with data encryption, will read the data decryption of disk, be characterised in that:

The data encryption of disk will be write;

The data decryption of disk will be read;

Other IO are without any need for special processing.